Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0376215-b512-3572-b3de-c29a5479034b.roa
File: a0376215-b512-3572-b3de-c29a5479034b.roa (raw, json)
Hash identifier: DBzHT1hEF3BVONQHnFMiJdNQOnAzpVrtu2Vv808N+Cs=
Subject key identifier: 70:10:30:B2:A9:82:4A:CC:98:58:6D:D2:68:0B:2B:FB:70:CB:66:17
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1C30C254FBFBCD83B51980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0376215-b512-3572-b3de-c29a5479034b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.101.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1c:30:c2:54:fb:fb:cd:83:b5:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0a7323e9-6311-4a6d-80b1-7981d50f6d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d1:34:29:10:65:d1:4c:b2:51:05:58:79:c4:
32:da:71:b4:8d:8d:a0:ce:9e:47:64:65:06:a6:42:
52:cb:07:87:9a:77:14:a7:8e:0e:0b:e1:cc:81:ee:
cd:7e:df:ff:1a:ec:a1:3f:24:d8:4b:9c:d5:95:71:
e3:3c:3c:8c:91:59:26:3e:62:92:ba:17:7e:0b:be:
96:c6:23:d7:3f:ad:aa:22:b5:7c:57:35:a1:17:52:
7a:f4:ac:d4:f9:2d:d3:ab:86:c0:66:d5:b6:16:50:
1f:1a:c4:a4:fe:1d:be:4c:1e:60:9f:ae:9b:c1:4e:
5d:bd:35:b6:b4:f3:fb:63:c5:f5:69:ee:63:19:78:
c9:f7:a7:7d:69:32:39:6b:0a:8d:ef:37:43:6e:c9:
63:03:af:fb:0f:34:27:a7:d4:a5:f6:40:27:49:72:
48:db:c2:6d:03:b4:11:fa:74:36:8c:3c:d2:04:fe:
20:bc:6b:b3:29:2a:90:d0:0b:45:d5:70:c3:7e:83:
96:88:e4:40:44:96:d2:25:44:ff:7d:ca:9c:11:31:
b5:9d:6a:29:04:d0:09:68:71:cf:fe:89:39:16:d8:
72:32:29:fd:a3:70:31:99:37:1e:39:2d:a9:86:eb:
fc:70:e8:60:97:79:28:9d:e4:b1:16:41:d4:92:c7:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:10:30:B2:A9:82:4A:CC:98:58:6D:D2:68:0B:2B:FB:70:CB:66:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0376215-b512-3572-b3de-c29a5479034b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.101.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:67:ed:23:ef:d2:f8:a9:a3:7d:9a:16:0c:8f:59:97:05:01:
89:d2:2e:6b:bc:ec:c3:fe:1e:33:8f:c1:d3:0a:cb:e5:ef:47:
b5:b6:fb:d8:65:4c:17:54:18:fd:c2:f7:b1:c6:64:67:0a:f0:
05:3c:a1:45:48:9d:95:db:f2:87:8d:23:9a:d2:d5:c2:15:60:
2f:7a:46:b1:9b:c0:e7:93:ae:00:04:e4:69:f6:84:ef:af:bd:
3b:fe:65:be:6d:01:78:8f:a9:f7:b3:e1:e6:0a:55:6d:d4:f3:
18:a4:d6:36:cb:a1:5e:b0:c1:91:a7:f7:09:eb:26:0d:e1:51:
9e:50:e2:8b:ad:ba:aa:33:0b:25:76:52:91:e1:4b:63:31:71:
e0:df:3b:53:d6:8c:f2:b8:01:40:74:bf:d4:f7:53:b4:f2:61:
48:b4:dd:71:fc:4b:15:60:53:73:fe:80:2c:73:96:39:02:f9:
11:95:07:24:82:35:32:28:06:1e:6f:b2:6f:45:81:d0:a6:72:
c3:1c:06:3e:8e:4c:be:14:a6:35:03:9b:89:f3:ba:bf:d7:fd:
db:36:6f:fa:0c:05:ed:d9:7b:64:7f:8e:fb:80:e8:24:3c:ae:
2c:88:6e:51:95:5f:fa:72:63:61:dd:e8:c7:34:c6:5e:3b:95:
05:d7:61:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:40:35 2025 by rpki-client